How can you secure/encrypt your querystring in asp.net?

前端 未结 4 657
鱼传尺愫
鱼传尺愫 2021-01-21 01:56

I was wondering how you could encrypt/decrypt your querystring in a simple asp.net page? some values need to be passed between different pages but the querystring cannot be chan

4条回答
  •  南笙
    南笙 (楼主)
    2021-01-21 02:04

    I needed to do this and just for reference this was my chosen solution.

    Use a HTTPModule to encrypt and decrypt. Then just put the module in the web.config.

    Found it here: https://madskristensen.net/blog/httpmodule-for-query-string-encryption/

    From the article:

    What we need is an HttpModule that can turn the encrypted query string into a normal readable one, so that we can still use our old logic like Request.QueryString["user"]. In other words, we want the user to see this

    ?enc=VXzal017xHwKKPolDWQJoLACDqQ0fE//wGkgvRTdG/GgXIBDd1

    while your code sees this

    ?user=123&account=456.

    Sample code in the article has the module you would add.

提交回复
热议问题